Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
File:                     mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft (raw, json)
Hash identifier:          D4XJIQVKFQ80Jop/598V8gKn+g//EGkhUJXSNZe//PY=
Subject key identifier:   A1:6E:9E:65:CF:54:41:F7:C2:CC:29:FB:46:B8:D7:DB:E8:B9:1A:D4
Authority key identifier: 9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48
Certificate issuer:       /CN=A919E68B/serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
Manifest number:          A3
Signing time:             Sun 01 Mar 2026 08:34:09 +0000
Manifest this update:     Sun 01 Mar 2026 08:34:08 +0000
Manifest next update:     Sun 08 Mar 2026 08:34:08 +0000
Files and hashes:         1: mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl (hash: fDEEjA7s2yQ4fmSwUvZF+azMve+L3gvsBm47CPrjEn0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl
                          rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E68B, serialNumber=9AD4C805328CEDCF51903404896474D6DE486748
        Validity
            Not Before: Mar  1 08:34:08 2026 GMT
            Not After : Mar  8 08:34:08 2026 GMT
        Subject: CN=69a3fa00-125f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:27:b4:3f:fc:07:6e:79:93:8d:a0:a9:92:2e:
                    9b:27:7b:b9:f9:10:b1:a2:56:ad:cf:ff:05:d5:12:
                    20:79:2a:28:e7:7c:bd:83:92:10:cd:65:f4:07:1c:
                    80:53:d6:be:70:9b:46:e5:37:b1:23:07:04:1c:f7:
                    fd:97:d6:62:08:1b:e7:11:18:48:fb:ae:da:ee:3f:
                    87:df:3e:52:db:ed:99:67:dd:1f:22:2c:65:f6:c1:
                    33:b3:fd:b3:8f:74:f5:91:6e:e1:68:cc:14:a7:de:
                    bb:1e:9d:ba:21:33:35:4c:d7:7a:a5:08:05:50:0d:
                    d8:09:59:c1:09:59:a3:a8:96:3e:5f:a0:2d:b7:c0:
                    51:43:77:a0:e5:53:39:e9:30:0b:33:2b:ed:5a:85:
                    75:ac:4b:d7:86:cb:47:a1:49:72:63:14:c7:57:c0:
                    da:7d:ac:32:b6:95:44:b6:54:1f:78:e5:01:7b:b1:
                    36:9c:cd:c4:e9:75:dc:93:4d:ee:d4:a1:2c:33:36:
                    6a:97:4e:69:27:97:5f:39:3e:af:57:92:30:85:46:
                    3c:e0:ce:33:1d:e3:1c:97:5a:8d:06:15:cf:51:c4:
                    f3:50:bc:fd:51:03:9a:54:b5:24:be:d3:62:d9:18:
                    fe:58:20:25:2f:27:f0:1d:ff:e5:a7:ab:5e:98:39:
                    40:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6E:9E:65:CF:54:41:F7:C2:CC:29:FB:46:B8:D7:DB:E8:B9:1A:D4
            X509v3 Authority Key Identifier:
                keyid:9A:D4:C8:05:32:8C:ED:CF:51:90:34:04:89:64:74:D6:DE:48:67:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mtTIBTKM7c9RkDQEiWR01t5IZ0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E68B/16A90C441CF011F088CF7182C4F9AE02/mtTIBTKM7c9RkDQEiWR01t5IZ0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:70:a1:0d:fb:20:56:0c:00:b0:cb:89:1b:2a:5c:93:ca:34:
         66:5f:d4:8f:f8:0a:27:75:ee:0a:d8:89:eb:53:d2:3e:0d:6e:
         87:5d:ee:08:4f:fb:81:e8:a3:7e:96:22:f1:a3:d8:23:3f:51:
         94:be:f3:45:ad:e6:f4:e6:16:6b:7d:76:0d:35:27:61:da:8e:
         41:39:4d:16:b6:88:d7:62:a6:36:eb:1a:61:cf:64:1f:5a:25:
         dd:c2:12:4a:10:69:b5:db:f6:56:92:de:4c:28:dc:a4:98:73:
         47:d0:1d:cf:8f:54:93:ab:1f:84:60:b8:d4:e8:60:7f:97:e2:
         3f:4b:05:b6:3c:7d:bf:12:48:0c:a1:40:cb:c5:ab:e2:21:b8:
         6d:c6:19:f6:1a:74:ac:07:73:46:05:33:90:62:00:ef:06:43:
         4e:15:75:b5:d3:dc:38:d7:3d:27:fe:9e:6c:40:d9:36:b7:31:
         0b:7b:20:d5:71:1a:0e:51:34:1a:2d:27:28:94:52:d3:cc:c9:
         ce:5a:c7:a4:eb:df:fb:d9:96:85:9f:85:c2:89:aa:d1:cd:d1:
         85:24:ee:dc:2b:d1:2c:86:ed:6b:bc:53:ab:ee:9d:fc:31:59:
         e3:2f:e2:6d:81:5c:44:2c:71:18:0d:89:3a:14:ef:ab:56:fe:
         3e:a3:0b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:01 2026 by rpki-client